Privacy Policy
This information is provided pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679 (hereinafter "GDPR") and relates to personal data processed through the website.
1. Data controller
The Data Controller is:
Azienda Agricola Cas. Soc. Santa Maria Soc. Agricola Coop
Headquarters: Via del Fiorentino, 2 – Cinghianello, 41040 Polinago (MO)
Telephone: 0536 47387
Email: santamariacaseificio@libero.it
The Data Controller guarantees that personal data will be processed in accordance with the principles of lawfulness, fairness, transparency, minimization, and protection of confidentiality.
2. Type of data processed
The following may be processed through the website:
Browsing data (IP address, browser type, operating system, access time)
Data provided voluntarily by the user, such as:
first and last name
email address
phone number
shipping and billing address
data necessary for order and payment management
Contact details submitted via information request forms or email
No special categories of data are processed (Article 9 GDPR).
3. Purpose of processing
Personal data is processed for the following purposes:
allow navigation of the website
respond to requests for information or contact
manage orders, shipments, invoicing, and payments
comply with legal and tax obligations
ensure site safety
send informational communications, only with the user's prior consent
4. Legal basis for processing
The processing of personal data is based on one or more of the following legal bases:
performance of a contract or pre-contractual measures
compliance with legal obligations
express consent of the data subject
legitimate interest of the Data Controller (e.g., site security, fraud prevention)
5. Processing methods
Data processing is carried out using IT and telematic tools, with technical and organizational measures in place to ensure the security, integrity, and confidentiality of the data.
The data will not be disclosed.
6. Data retention
Personal data will be stored for the time necessary to:
fulfill the purposes for which they were collected
comply with legal and tax obligations
handle any disputes
Order data is stored in accordance with the terms set forth in current legislation.
7. Disclosure of data to third parties
Personal data may be disclosed to:
tax and accounting advisors
technical service and hosting providers
couriers and shipping services
electronic payment platforms
These parties process data as Data Processors or Independent Data Controllers.
7.1. Online payments (Stripe and Klarna)
For online payment management, the site uses the following payment services:
Stripe Payments Europe Ltd
Klarna Bank AB
Payment data (e.g., card number, bank details, authentication data) are not processed or stored in any way by the Data Controller, but are managed directly by the respective payment service providers, acting as independent Data Controllers.
Personal data may include:
first and last name
email address
billing address
order amount
transaction identifiers
The processing of such data is necessary for the performance of the purchase contract and is based on Article 6(1)(b) of the GDPR.
For more information on the processing of personal data by payment providers, please refer to their respective privacy policies:
Stripe – Privacy Policy
Klarna – Privacy Policy
7.2. Shipping and delivery of products
For the delivery of purchased products, the user's personal data may be disclosed to couriers and logistics operators, exclusively for shipping purposes.
The data transmitted may include:
first and last name
shipping address
phone number
email address (for delivery notifications)
These parties process data as Data Processors or Independent Data Controllers, limited to the operations necessary for the delivery of products.
The legal basis for processing is the performance of the sales contract (Article 6(1)(b) GDPR).
7.3. Order management and invoicing
The personal data provided during the purchase process is processed for:
order management
purchase confirmation
invoicing and tax compliance
handling of any returns or refunds
after-sales customer service
The data will be stored for the period required by current tax and accounting regulations.
7.4. Fraud prevention and transaction security
The Data Controller and payment providers may process certain personal data for the purposes of fraud prevention, identity verification, and transaction security, including through automated systems.
This processing is based on the legitimate interest of the Data Controller and payment providers (Article 6(1)(f) GDPR).
7.5. Mandatory data required
The provision of personal data marked as mandatory during the purchase process is necessary for:
complete the order
make the payment
allow the shipment of products
Failure to provide such data will make it impossible to proceed with the purchase.
8. Transfer of data outside the EU
Personal data is not transferred to countries outside the EU.
Should this become necessary, the transfer will take place in compliance with the guarantees provided for by the GDPR.
9. Rights of the data subject
The data subject may exercise the rights provided for in Articles 15-22 of the GDPR at any time, including:
access to personal data
correction or update
deletion (right to be forgotten)
processing restriction
objection to processing
data portability
withdrawal of consent
Requests can be sent to: santamariacaseificio@libero.it
10. Complaint to the supervisory authority
The data subject has the right to lodge a complaint with the Data Protection Authority if he or she believes that the data is being processed in violation of current legislation.
11. Changes to this policy
The Owner reserves the right to modify this Privacy Policy at any time.
Changes will be published on this page.